WMI Provider Host file reports

WMI Provider Host

WMI Provider Host is a product name observed in ThreatInfo file telemetry. This page groups the latest 4 files that reference this product name, including their detection status and direct file reports.

Review the listed files before removing anything: legitimate software can share product names with unwanted or repacked installers, while malicious files often reuse familiar product metadata to appear trustworthy.

Scan files associated with WMI Provider Host:

wmiproviderhost.exe 77207356a5d75aef7238dde0d4ca2a54 Trojan.CoinMiner
CfkBCChFHeEcBCHhHHHBchHCShsSAK 8ba2dc386f2a0574df65c9906e1a6c7a Suspicious Object
GHLPT.exe 0bec1bbb7304f6cfc0991ffe48e19aa3 Trojan.CoinMiner
kKCCSASuASEhKFSKaAeUaUHFAAUkkc 85beeeb4e950c34b0ca411cf138f1e9f Trojan.CoinMiner